3proxy-setup/config.https.example.yaml at main · vdk-proxy-suite/3proxy-setup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
install:
  version: "1.0.0"
  source_url: "https://github.com/3proxy/3proxy/archive/refs/tags/1.0.0.tar.gz"
  sha256: "35b07de1046f3aaeac4a7085101b7e5c453efa3527cbdc42a84690366c7ecfa8"

server:
  public_ip: "203.0.113.10"
  listen_ip: "0.0.0.0"
  udp_client_cidr: "127.0.0.1/32"
  manage_ufw: false

logging:
  format: "monitor_v1"
  rotation: "daily"
  keep_files: 14
  compress: true

access:
  mode: "strong"

local_auth:
  username: "CHANGE_ME_LOCAL"
  password: "CHANGE_ME_LOCAL"

tls:
  client_ca_file: "/etc/ssl/certs/ca-certificates.crt"
  server:
    dns_names:
      - "proxy-vm.example.com"
    validity_days: 365
    ca_validity_days: 3650
    regenerate_on_setup: false

upstreams:
  https_primary:
    type: "https"
    host: "proxy.example.com"
    port: 8443
    username: "CHANGE_ME_UPSTREAM"
    password: "CHANGE_ME_UPSTREAM"
    tls_server_name: "proxy.example.com"
    expected_egress_ip: "198.51.100.20"
    capabilities: [tcp]

listeners:
  - id: "public_socks_tls"
    protocol: "socks5"
    listen_ip: "0.0.0.0"
    port: 1082
    parent: "https_primary"
    capabilities: [tcp]
  - id: "public_http_tls"
    protocol: "http"
    listen_ip: "0.0.0.0"
    port: 8082
    parent: "https_primary"
    capabilities: [tcp]
  - id: "public_https_tls"
    protocol: "https"
    listen_ip: "0.0.0.0"
    port: 8443
    parent: "https_primary"
    capabilities: [tcp]
  - id: "local_socks_tls"
    protocol: "socks5"
    listen_ip: "127.0.0.1"
    port: 11080
    parent: "https_primary"
    capabilities: [tcp]
    access:
      mode: "iponly"
      allowed_client_cidrs:
        - "127.0.0.1/32"

probes:
  timeout_seconds: 8
  http_host: "api.ipify.org"
  http_port: 80
  dns_server: "1.1.1.1"
  dns_port: 53
  stun_servers:
    - host: "stun.l.google.com"
      port: 19302
    - host: "stun.cloudflare.com"
      port: 3478